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Abstract 

If P is an algebraic point on a commutative group scheme A/K, then 
P is almost rational if no two non-trivial Galois conjugates o~P, tP of P 
have sum equal to 2P. In this paper, we classify almost rational torsion 
points on semistable elliptic curves over Q. 

1 Definitions and Results 

Let X be an algebraic curve of genus greater than one. Let J(X) be 
the Jacobian variety of X, and embed X in J(X). The Manin-Mumford 
conjecture states that the set of torsion points Ators :— X n Jtors is finite. 
This conjecture was first proved in 1983 by Raynaud It has long been 
known that the geometry of X imposes strong conditions on the action 
of Galois on X toIs . An approach to the Manin-Mumford conjecture using 
Galois representations attached to Jacobians was first suggested by Lang 
\7\. Recently, by exploiting the relationship between the action of Galois 
on modular Jacobians and the Eisenstein ideal (developed by Mazur 
Baker [T] and (independently) Tamagawa 121 1| explicitly determined the set 
of torsion points of Xo(N) for N prime. Developing these ideas further, 
Ribet defined the notion of an almost rational torsion point, and used 
this concept to derive the Manin-Mumford conjecture |12| using some 
unpublished results of Serre |13|. One idea suggested by these papers is 
that a possible approach to finding all torsion points on a curve X is to 
determine the set of almost rational torsion points on J(X). Moreover, the 
concept of an almost rational torsion point makes sense for any Abelian 
variety, or more generally any commutative group scheme, and the set of 
such points may be interesting to study in their own right. In this paper 
we consider almost rational points on semistable elliptic curves over Q, 
and prove (in particular) that they are all defined over <Q>(\/— 3). 
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Let if be a perfect field, and let A/K be a commutative algebraic 
group scheme. 

Definition 1 Let P G A(K). Then P is almost rational over K if the 
following holds: For all a, r G G&\(K / K) , the equality 

aP + rP = 2P 

is satisfied only when P = aP — tP. Equivalently, P is almost rational if 
any two non-trivial Galois conjugates of P have sum different from 2P. If 
P is also a torsion point of A, then we call P an almost rational torsion 
point . 

Lemma 1.1 Let P be an almost rational point over K. 

1. If L D K is a subfield of K , then P is almost rational over L. 

2. If Q is a K-rational point of A, then Q is almost rational over K. 

3. If Q is a K-rational point of A, then P + Q is almost rational over 
K. 

4- Let 7 G G&\(K / K) . Then 7P is almost rational over K. 

5. Let a G Gal(K/K). If (a - 1) 2 P = then aP = P. 

6. If2P is K-rational, then so is P. 

Proof. The statements 1, 2 and 3 are obvious. For 4, suppose that 
0-7P + tjP = 27P. Then 

7 _1 ct7P + 7~V7P = 2P. 

Since P is almost rational, P = ■y~ 1 a-yP — j~ 1 tjP and thus 7P = 
0-7P = T7P. For 5, one has cr 2 P - 2aP + P = 0. Applying cr _1 to the 
left hand side of this equation, one finds that erP + cr _1 P = 2P. Setting 
t — a^ 1 and using the fact that P is almost rational we conclude that 
P = oP. For 6, let o~P be any Galois conjugate of P. Then 

aP + aP = 2aP = cr(2P) = 2P 

and so by almost rationality, P = aP for all a, and so P is ff-rational. □ 
Caution. We shall see below (Theorem 1.2) that the set of almost rational 
points does not necessarily form a group. In fact, the almost rationality 
of P does not imply the almost rationality of multiples of P. 

Lemma 1.2 Let A = G m /Q. Then the almost rational torsion points on 
A are exactly the points of order dividing 6. Let H = n„/K, where K 
is any field such that G&\(K(^ n ) / K) ~ Gal(Q(£ n )/Q). Then the almost 
rational torsion points on H are the points of order dividing 6. 

Proof. Let P be a torsion point of order n on A. The Galois module 
generated by P is the cyclotomic module fj, n . The action of Galois on fj, n 
is via the mod n cyclotomic character: Xn '■ Gal(Q/Q) — > (Z/nZ)*; i.e., 
we have aP — X"{°~)P for a G Gal(Q/Q). To show that P is not almost 
rational, it suffices to find a, r such that X*i(°~)P + Xn( T )P = 2P and 
P =fc aP. In particular, since Xn acts faithfully on fi n , it suffices to find a, 
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b £ (Z/nZ)* such that a / 1 and a + b = 2. We attempt to do this using 
the Chinese Remainder Theorem. If p fc ||n and p 7^ 3 let a = 3 mod p fe 
and 6 = -1 mod p k . If 3 fc ||n let a = 4 mod 3 fc and 6 = -2 mod 3 fc . As 
long as n \ 6, we find that a ^ 1, and so P fails to be almost rational. If 
P is of order 1 or 2, then P is rational and so almost rational by Lemma 
1.1(2). If P is of order 3 (respectively 6), then the only non-trivial Galois 
conjugate of P is aP = 2P (resp. aP — 5P). In either of these cases 
aP + <jP 7^ 2P, and so P is almost rational. An similar argument proves 
the result for H. □ 

The following lemma provides a connection between almost rational 
points and torsion points on curves, as well as providing a natural source 
of almost rational points. 

Lemma 1.3 Let X/K be a curve of genus g > 2, and Q £ X(K) a K- 
rational point on X. Let J/K be the Jacobian of X, and let Iq : X ■— > J 
be the Albanese map P h [P — Q] defined over K. Then for any point 
P G X(K), either P is a hyperelliptic branch point of X , or iq(P) is 
almost rational over K . 

Proof. Since Iq is a closed immersion, we shall identity points of X 
with their images. Assume that aP + tP — 2P. Then since J(K) ~ 
Pic (X (K)), the divisor D = (aP) + (rP)-2(P) is principal, and so equals 
(/) for some function /. Either / is constant, in which case P — aP = tP, 
or / is of degree 2, in which case P is a hyperelliptic branch point of /. 
The result follows. □ 

One of the main motivations for studying almost rational torsion points 
is the following result of Ribet I12|: 

Theorem 1.1 Let A/K be an Abelian variety. Then the set of almost 
rational torsion points on A is finite. 

Remark. Ribet's proof depends on some of Serre's unpublished "big- 
image" Theorems |13| and is not effective. Note that the Manin-Mumford 
conjecture follows from Theorem 1.1 when X is embedded in its Jacobian 
via an Albanese map. This paper provides an effective version of Theorem 
1.1 when A/<Q> is a semistable elliptic curve, and in this case we give a 
complete classification of the possible almost rational torsion points which 
can arise. 

In contrast, the following result (pointed out by Bjorn Poonen) shows 
that there is an abundance of almost rational points that are not torsion 
points. 

Lemma 1.4 For any P £ ^t(Q), there exists an n > such that nP is 
almost rational. 

Proof. Since P is algebraic, it is defined over some Galois field K/Q, 
and has only finitely many Galois conjugates. Choose n such that every 
torsion point of the form aP — tP is killed by n. Then Q = nP is almost 
rational. Indeed, by construction, the Galois orbit 5* of Q injects into 
A(K) ® R. If Q' is some extremal point of the convex hull of S (with 
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respect to the canonical height) then the identity oQ' + tQ' = 2Q' can 
hold only if Q' — oQ' = tQ' . Thus Q' is almost rational. Since Q' is a 
Galois conjugate of Q, it follows that Q is also almost rational, by Lemma 
1.1(4). □ 

The main result of this paper is the following: 

Theorem 1.2 Let P be an almost rational torsion point over Q on a 
semistable elliptic curve E/Q. Then either P is rational, or it can be 
written as a sum Q + R + S , where 

1. Q generates a (cyclotomic) fis subgroup of E\S\. 

2. R is a rational point of 3 -power order: R £ i?(Q)[9], 



3. S is a Q(Ca) rational point of 2-power order: S G E(Q(t/^3~))[16\. 

Moreover, all sums of this form are almost rational. 
Example. Let E be the elliptic curve: 



of conductor N = 1302 = 2 • 3 • 7 • 31. Then as Galois modules, E[3] ~ 
Hz © Z/3Z, and the point S = (—3 — 6\/ — 3, 5 + 12\/— 3) is a torsion point 
of order 2. If Q is a 3-torsion point that generates Hz, then P — Q + S is 
an almost rational torsion point on E. Note that 3P = S is not an almost 
rational torsion point. 

The key idea of the proof of Theorem 1.2 is to limit the ramification 
of E[l] for the largest prime divisor I of \P\. Ribet's level lowering result 
1 1 (li can then be used to show that E[l] is reducible. There are several 
reasons why we restrict our attention to elliptic curves instead of higher 
dimensional Abelian varieties. In particular, we use many strong results 
about representations arising from elliptic curves (such as modularity) 
which have no convenient equivalent in higher dimensions. Secondly, we 
rely on the explicit determination, by Mazur .8 , of the possible rational 
torsion subgroups in E(Q). Some results, however, do apply in more 
generality, such as Lemma 1.5 below. 

Definition 2 Let P be an almost rational torsion point. Then the Galois 
module M associated to P is the module generated by P and all its Galois 
conjugates: 



Since P is a torsion point, M is finite as a Galois module. 

Example. If P is rational of order n then (as Galois modules) M ~ Z/nZ. 
Remark. Throughout this paper, the word finite is used in two different 
senses. 'M is finite as a Galois module' means that as an abelian group, 
M is finite. l M is finite as a group scheme' means that there exists 
some finite flat group scheme 97t/Spec Z such that 9Jt(Q) ~ M. Unless 
explicitly stated, we shall reserve finite to mean finite as a group scheme. 
'M is finite at a prime p', means that there exists some finite flat group 
scheme 9Jt p /Spec Z p such that OT P (Q P ) ~ M as Gal(Q p /Q p ) modules. M 
is finite if and only if it is finite at all primes p. If the cardinality of M is 
coprime to p, then M is finite at p if and only if M is unramified at p. 




y 2 + yx + y = x 3 + 354a; + 4684 
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Lemma 1.5 Let A/K be a semistable Abehan variety, and let P 6 A(K) 
be an almost rational point on A of order n. Then the Galois module M 
generated by P is finite at all primes not dividing n. In other words, M 
is unramified outside primes dividing n. 

Proof. Let p be a prime coprime to n. Let 7 P C Gsl(K / K) be a choice 
of inertia group above p. Then since A is semistable, the action of I p on 
the Tate module 21(^4) for l\n (or for any (7,p) = 1) satisfies (a — l) 2 = 0, 
for all a £ I f (see [I], expose IX, Proposition 3.5). In particular, writing 
P in terms of its Z-primary components we find that (a — 1) 2 P — 0. Since 
P is almost rational, by Lemma 1.1(5), oP = P. Applying the same 
argument to all the conjugates of P (which are still almost rational, by 
Lemma 1.1(4)), we find that M is unramified at p, and we are done. □ 

Remark. For semistable elliptic curves, the fact that inertia at p satisfies 
(a - lf\Ti{E) = for (l,p) = 1 can be proved directly without appeal 
to results of Grothendieck. In particular, either E has good reduction 
at p, in which case Ti(E) is unramified at p (by the criterion of Neron- 
Ogg-Shafarevich), or E has multiplicative reduction at p, in which case 
the result follows from the explicit description of Tate curves given (for 
example) in (|17|. Chapter V). 

2 Finiteness of p 

Let p be prime. Let p p denote the Galois representation associated to the 
Tate module T P (E). Let p p denote the mod p representation arising from 
the action of Galois on E\p\. One sees that p p is the reduction of p p mod 
P- 

Fix a semistable elliptic curve E/Q, an almost rational torsion point P 
of order n, and its associated Galois module M. Lemma 1.5 shows how one 
can control the ramification of M at primes away from n. In this section, 
we show how it is also somtimes possible to control the ramification at 
primes p dividing n. 

Theorem 2.1 Let p\n be a prime such that E[p] is irreducible. Then p p 
is finite at p. 

Proof. If E has good reduction at p then we are done, so we may assume 
that E has multiplicative reduction at p. We shall use the criterion, due 
to Serre f |15|. Proposition 5, p. 191), that p p is finite at p (peu ramifie) 
if and only if v p (A) = mod p. 

Let n = p k m with (m,p) = 1. Write P — P p + P' , where P p is 
of order p k , and P' of order m. Since M Pi E[p] ^ and E\p\ is ir- 
reducible, E[p] C M. Let E q denote the Tate curve isomorphic to E 
over K, where [K : Q p ] is an unramified extension of degree < 2. Since 
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K(Cn)(E q [n]) = if (£„, g 1 /™) we have the following diagram of fields: 
K(E q [n])=K(C n ,q 1/n ) 




K(( n ,q 1/m )^ K(E q [m}) 




K(Cn) 

We shall show that the extension K(C„, q 1/n )/K(C, n , q 1/m ) is trivial. As- 
sume otherwise. Then since K(E q [n])/ K is Galois, there exists a non- 
trivial Galois automorphism a £ Gal(K(E q [n})/ K) fixing K(£„, q x ^ m ). 
If a exists, then we may take it to be of order p and of the form: a : 

g m/n „ q m,/n^_ We choose & bagis ^m/^^J for g^fc] guch that ff 

acts via the matrix 

Since cr fixes -E 9 [m], (a — l) 2 P = 0. Considering a as an element of 
Gal(Q/Q) via the inclusion 

Gal(Q p /K) — Gal(Q/Q) 

we conclude from the almost rationality of P that ctP = P. Thus with 
respect to our chosen basis for E q [p k ], P p is of the form 

( bp ) 

From Lemma 1.1(4) we may apply the same argument above to 7P for 
every 7 G Gal(Q/Q), and so all Galois conjugates of P v are also of this 
form. It follows that the mod p Galois representation p p is upper triangu- 
lar, contradicting the irreducibility of E]p\. Thus K{( n , q 1/n )/K{C, n , q 1/m ) 
is the trivial extension. 

It follows that q 1/n e L := K(( n ,q 1/m ), and so in particular q 1/m is a 
p k -th power in L, and thus its normalized valuation with respect to this 
field satisfies Vh{q) = mod p k . Since (m,p) — 1, the wild ramification 
of K(( n ,q 1/m ) is limited to K(( pk ), for which p k - 1 \\e(K(( pk )/Q p ). Since 
Vh{q) = e(L/Q p ) ■ vq p (q), the valuation of q with respect to Q p must be 
divisible by p. Thus 

ordp(Ag) = ordj, ^<?]^[(1 — q") 24 ^j = ord p (q) = mod p 

and therefore E[p] is finite at p. □ 

Theorem 2.2 Let £ be the largest prime factor of n — \P\. Then E[£] is 
reducible. 
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Proof. Assume otherwise. From Theorem 2.1, since E[l] is irreducible, pt 
is finite at I. Let p 7^ I be prime. We will show that E[l] is unramified at 
p, or that / = 3 and p = 2. In fact, with no assumptions on we shall 
show more generally that M[Z°°] is unramified at p. The irreducibility 
assumption on E[l] then ensures that E[l] C M[Z°°] and thus that E[l] is 
also unramified at p. 

For primes p \ n the result follows from Lemma 1.5. Hence it suffices to 
consider p / i such that p\n. Write P in terms of its g-primary components 

P = P 2 + Pz + . • • + P P + ■ ■ . + P; 

where P q is a torsion point of order g fc ||n. Let I p denote a choice of inertia 
group at p. Let a £ I p be an element of the inertia group. Then by the 
proof of Lemma 1.5 (or the subsequent remark), (a — l) 2 P q = for q 7^ p. 
Consider the following diagram of fields: 

Q(M[Z°°]) Q(M) 




For a e I p fixing M[p°°], aP v = P p and so (a - 1) 2 P P = 0. For such a, 
(a — l) 2 P = 0, and thus by Lemma 1.1(5), aP — P. Applying this to the 
Galois conjugates of P, one concludes that the extension Q(M) /Q(M\p°°]) 
is unramified at all primes above p. Comparing ramification indices at p 
in the diagram above, 

e p (Q(M)/Q(M\r]) ■ e p (Q(M[/°°])/Q) = ej) (Q(Af b°°])/Q). 

If P p is of order p k , then M[p°°] C £[p fe ] and so e p (Q(M[p°°])/Q) divides 
the order of GL 2 (Z/p k Z) = (p 2 - l)(p - l)p 4fc " 3 , and so in particular, 
e := e p (Q(M[Z°°]/Q) also divides this number. Yet the action of I p on 
Ti(E) is unipotent, and so e is either 1 or some power of I. Since / is the 
largest prime factor of n, p < I, and thus 

(l,(p 2 -l)(p-l)p 4k - 3 ) = (l,p + l) 

which equals 1 unless (l,p) = (3,2). Thus if I ^ 3, A/[Z°°] is unramified 
outside I, and for all I, M[l°°] is unramified outside 2 and i. If E[l] is 
irreducible, then the Serre conductor |15| N(pt) is equal to 1 or 2 (Since 
E is semistable, the exponent of 2 in the Serre conductor must be at most 
1). By Wiles |22| and Taylor- Wiles |19| . pt is modular. Since pe is finite 
at I, For I > 2 Ribet's level lowering result |10| implies that pe arises from 
a weight two modular form of level one or two. No such form exists. This 
is a contradiction, and the theorem follows. For I = 2 and E[2] irreducible 
one finds that N(p2) = 1, contradicting a theorem of Tate |18| . □ 

Corollary 2.1 Let I be any prime divisor of n. Then M[Z°°] is at most 
ramified at I and primes p\n such that l\(p 2 — 1). Moreover, if p 7^ I and 
E[p] is reducible, then M[l°°] can only be ramified at p if l\(p — 1). 
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Proof. The first part of the Corollary is proved during the proof of 
Theorem 2.2. If E[p] is reducible, then [Q(£[p]) : Q] divides p(p- 1), and 
so arguing as in Theorem 2.2 we conclude that I divides (p — 1). 

Corollary 2.2 Let P be an almost rational torsion point of order n. Then 
if I is the largest prime dividing n, then I < 7. 

Proof. If E is reducible at p, then since E is semistable, it follows from 
Serre (|14| Proposition 21, p. 306, and subsequent remarks) that either 
E or some isogenous curve E' has a rational point of order p. The result 
then follows from the following theorem of Mazur ([S], Theorem 8, p. 35): 

Theorem 2.3 (Mazur) Let $ be the torsion subgroup of the Mordell- 
Weil group of an elliptic curve over Q. Then $ is isomorphic to one of 
the following 15 groups: Z/mZ for m < 10 or 12; Z/2Z0Z/2fcZ for k < 4. 

3 The possible cases 

Corollary 2.2 severely limits the possible prime divisors of n. In this 
section, we eliminate all possibilities not allowed by Theorem 1.2. Let 
S denote the set of primes dividing n. Corollary 2.2 restricts S to 15 
non-trivial possibilities, which divide into three cases. 

3.1 Case I: S — {p}, n = p k 

When n = p k our strategy is as follows. First we show that M is an 
extension of a trivial module by a cyclotomic module. If p > 3, this 
sequence splits, and it suffices to find almost rational torsion points on 
the cyclotomic module /i p r, which we calculated in Lemma 1.2. For p — 2, 
some complications arise, but the essential ideas remain the same. Some 
of our arguments can be shortened using results of Tamagawa f |20|. for 
example Theorem 3.2), however, we proceed directly in order to be self 
contained. 

We begin by recalling an elementary result from the theory of cyclo- 
tomic fields. 

Lemma 3.1 Let h(K) denote the class number of the field K . Suppose 
that p is inert in K . Then for k > 1, 

p\h(K(C P ))^p\h(K(C pk )). 

In words: p divides h(K(£ p k)) for all k if and only if p is an irregular 
prime with respect to K. 

For a proof, see (for example) Theorem 10.4 of Washington |21|. 

Lemma 3.2 If p < 7, p \ h(Q(( p k)). Moreover, 2 \ h(Q(( 3 . 2 k)) and 
2 j h(Q(( 5 , 2 k)) . For each of these fields K, if L/K is a Galois extension 
such that Gal(L/ ' K) is a p-group and L/K is unramified, then L = K . 
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The first statement is a consequence of Lemma 3.1, the fact that the fields 
Q(Cn) have class number 1 for n — 1, 3, 4, 5, 7, 12, 20, and the fact that that 
2 is inert in Q(C P ) for p = 3, 5. The second statement follows from the 
identification of the class group with the Galois group of the Hilbert class 
field, and the fact that all p-groups are solvable. □ 

Assume that \P\ = n = p k for some k. Recall that M is the module 
generated by P and its conjugates. 

Lemma 3.3 Q(M) = Q(M[p k ]) C ®{C p k). 

By Lemma 1.5 we find that M is unramificd outside p. By Theorem 2.2, 
E is reducible at p. Since elliptic curves with supersingular reduction at 
p are automatically irreducible at p, either E has multiplicative or good 
ordinary reduction at p. In either case, the action of inertia at p on E[p k ] 
is given by 

(ft, mod p k )\ Ip = ( J * ) 

where \ ls the cyclotomic character, and * is possibly trivial. It follows 
from the almost rationality of P that M is unramified over Q(C p fc), since: 

Xl G al(Q/0(C pfc )) = 1 m ° d P" 

and so all inertial elements fixing Q(C p fc) will satisfy (a ~ 1) 2 P — 0. 

Since E is reducible at p, Q(-E[p], Cp)/Q(Cp) i s a Galois extension of 
degree dividing p. Gal(Q(E[p k ]) /Q(E[p])) is automatically a p-group, 
and thus Gal(Q(£[p fc ])/Q(C P )) is also. Since M C E[p k ] it follows that 
the extension Q(M, C p fc)/Q(C P fc ) is an unramified Galois extension whose 
Galois group is a p-group. Thus by Lemma 3.2, Q(M) C Q(C p fe), as 
claimed. □ 

Suppose that -B has multiplicative reduction at p. Then locally at p, 
E is given by a Tate curve E q . Let I p denote the absolute inertia group 
of Q p . For each n, we have an exact sequence of J p -modules: 

— > fj, p n^ E q [p n ] -t Z/p n Z — ► 

Let M' = Mn^ pfc and M" = ?/>(M) C Z/p k Z. Then by the Snake Lemma 
we have an exact sequence of J p -modules: 

— > M' — > M — > M" — > 

Since M is defined over Q(C p fc), this is in fact an exact sequence of G- 
modules, where G = Gal(Q(C p *)/Q) = Gal(Q p (C p fe)/Qp) ^ I P , and where 
the action of Gal(Q/Q) on M factors through G. Moreover, we observe 
that as Galois modules, M" is constant and M' is cyclotomic. 

Now suppose that E has ordinary good reduction at p. On the level of 
inertia, multiplicative and ordinary good reduction are highly analogous. 
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In particular from VII. Prop. 2.1) and (|TI| Prop. 11), E[p n ] sits in 
an exact sequence of 7 p -modules: 

— ► /v* — ► E[p n ] -1 Z/p n Z — ► 

where ip is reduction mod p on the elliptic curve. This is precisely the 
Jp-module sequence arising when E has multiplicative reduction, and so 
we may treat these cases simultaneously. 

Assume for the moment that p > 3. Taking G-invariants of the above 
sequence we obtain an exact sequence of Galois cohomology: 

— > H°(G,M) — > H°(G,M") — y ^(CM') 

Since G is cyclic and p > 3, by Sah's Lemma (IJj, Ch.8 Lemma 8.1), 
H^CM') = 0. Since M" is a constant module," H°(G,M") = M". 
Thus we obtain a map 

M" ~ H°(G,M) A/ 

which induces a splitting (as Galois modules) of our exact sequence. Thus 
M ~ n P r Z/p s Z for some integers r, s. From Lemma 1.2, it follows that 
either P is rational, or p = 3, r = 1, and P is a rational point of 3-power 
order plus a point that generates a /i3 subgroup of E[3]. From Theorem 
2.3, this rational point is of order dividing 9. 

Assume now that p = 2. Consider the following sequence of G- 
modules: 

— y M' — y M -t M" — > 

Let H be the minimal quotient of G which acts on M' . Then H = 
Gal(Q(C2'-)/Q) where r = log 2 \ M'\. We show that the action of G on M 
factors through H. Let a £ G become trivial in H (so a acts trivially on 
M'). Since ip(aP - P) = cnp(P) - ip(P) = 0, one sees that aP - P G M' . 
Thus (a - 1) 2 P = (or - l)(oP - P) = 0. By almost rationality aP = P. 
Since all the conjugates of P are also almost rational, we see that a fixes 
M, and the claim follows. 

Let Q £ M. The map H — > M' given by a t—> aQ — Q defines an 
element of 

ff 1 (i?,M') = i? 1 (Gal(Q(C 2 0/Q),^2'-)-^ 1 ((Z/2 r Z)*,Z/2 r Z). 

Sah's Lemma only shows that this group is killed by 2. In fact, an elemen- 
tary argument shows that it is isomorphic to Z/2Z, where the non-trivial 
cocycle class is given by 

/(-l mod 2 r ) = 2 r_1 mod 2 r , /(-3 mod 2 r ) = mod 2 r . 

(0 and 2 r_1 correspond to the elements 1 and —1 in (i2<-)- The cocycle 
picked out by Q is the image of Q under the composition 

M — + M" 1 H^i^M') 
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This cocycle is given by <5,/,(q) : a aQ — Q. Since H 1 ~ Z/2Z, we may 
write (5^,(Q) as or / plus some coboundary. In particular, aQ — Q = 
aQ' — Q' + T a for all a and some fixed (depending only on Q) Q' £ M' , 
and where T a is either or f(a). In particular, T a is Galois invariant 
(since ±1 is Galois invariant in fj,2-r) and killed by 2. Thus for any Q £ M 
we may write Q = Q' + Q" with Q' £ M' such that 

aQ = Q + aQ' - Q' + T CT = aQ' + Q" + T a . 

Moreover, since T„ is a cocycle, T TrT — TT a + T T = T CT + T T . 

Choose a,r € Gal(Q/Q) such that: 

X(a) = 1 + 4k mod 2 r , xM s 1 - 4jfe mod 2 r 

Note that (1 + 4fe)(l — 4fe) = 1 mod 8 and so t<t -1 = 7 2 , for some -j £ H. 
Thus TV = T Ta -x + T a = 2T-, + T CT = T CT . One finds that crP + rP - 2P = 
T a — T T = 0. By almost rationality, P — aP. Thus the action of H on P 
factors through 

Gal(Q(C.)/Q)/^lx(.) S l m od4}.{ ^QW/<». 

and so P (and hence M) is defined over Q(i). In particular, since H — 
Gal(Q(C2'-)/Q) acts faithfully on M' C Af, we conclude that r < 2. Since 
r < 2 and P' £ M', it follows that IP' is either 1 or —1 in /i2>-, and so in 
particular is rational. For any a £ H , 

a{2P) = 2a(P' + P") = 2aP' + 2P" + 2T CT = a(2P') + 2P" = 2P 

and so 2P is rational. It follows from Lemma 1.1(6) that P is rational. 

3.2 Case II: S= {2,p}, n = p m 2 k , p = 5, 3 

From Theorem 2.2, E[p] is reducible. We show that E[2] is also reducible. 
Assume otherwise. From Lemma 1.5, E [2] is unramified outside 2 and 
p, and thus N(p2) is equal to 1 or p. Since E[2] is irreducible, Tate's 
theorem |18| eliminates the first possibility. Thus the representation p2 is 
genuinely ramified at p, and from Theorem 2.1, finite at 2. The arguments 
of |10| do not apply at the prime 2. However, another result of Ribet |11| 
allows us (since E is modular) to conclude that p2 arises from a modular 
form of weight 2 and level at most p. Since p < 5 the space of such forms 
is trivial, and so E[2] is reducible. 

Since E[2] is reducible, Corollary 2.1 shows that M[p m ] is unramified 
outside p. Arguing as in Lemma 3.3, we infer that Q(M[p m ]) C Q(Cp™)- 
For the proof to go through, it suffices to recall that any a £ I p satisfying 
(a— 1) 2 P P = (indeed, any a £ I p ) will automatically satisfy (a — 1) 2 P2 = 
0. 

Lemma 3.4 Q(M[2 k ], Cp)/Q(Cp) 18 unramified at all primes above p. 
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Proof. Consider the following diagram of fields: 

Q( Cpm ) Q(&m,M) =Q(C P ™,M[2 fc ]) 



Q(C P ) Q« P ,M[2 fc ]) 

Any element of Gal(Q(M, C P m )/Q(C P m )) (trivially) fixes Q(C P ™), and thus 
M[jp m ] (since Q(M[p m ]) C Q(C P ™)). Since E is semistable, any a E I p 
satisfies (a — l) 2 P2 = 0. In particular, any inertia at primes above p 
in Q(M, C P ™)/Q(C P m ) satisfies (a - 1) 2 P 2 = and crP p = 0, and so 
(a — 1) 2 P = 0. By almost rationality, aP — P, and thus the ex- 
tension Q(Cp™, Af)/Q(Cp m ) i s unramified at all primes above p. One 
concludes that that ramification index e p (Q(£ p m , M)/Q(£ p )) is equal to 
e p(Q(Cp m )/Q(Cp)) — p m_1 . Considering the other part of the diagram, 
however, one notes (again using semistability) that the ramification of 
Q(M[2 k ])/Q and thus of Q(M[2 fe ], C P )/Q(C P ) at p is of 2-power order. 
Since this order must divide p m -\ we conclude that Q(C P , M{2 k ])/Q(( p ) 
is unramified at all primes above p. □ 

From Lemma 1.5, M is unramified outside 2 and p. As in the proof 
of Lemma 3.3, any inertial elements a £ I2 fixing Q(C 2 *0 will satisfy 
(cr - 1) 2 P 2 = 0, and, by semistability, (a - 1) 2 P P = 0. Thus Q(M,< 2fc ) is 
unramified at all primes above 2 in Q(C2*0- Combining this with Lemma 
3.4 we infer that Q(M[2 fe ], ( p , ( 2k )/Q(( P , ( 2 k ) i s unramified everywhere. 
Since Q(E[2 k ])/Q is a 2-extension, (as E[2] is reducible) we infer from 
Lemma 3.2 that 

Q(M[2 fc ]) CQ(C 2fc ,C P ). 
Thus we have shown that Q(M) C Q(£ n ). In particular, the Galois group 
Gal(Q(M, CpVQ(Cp)) decomposes as a product of two groups, each of 
which acts trivially on either M[p m ] or M[2 k ]. 

Lemma 3.5 P p and P2 are themselves almost rational over Q(Cp)- 

Proof. Let <t,t € Gal(Q(Cn)/Q(Cj>)) satisfy aP p + tP p = 2P P . Then 
there exist a',r' G Gal(Q(^ n )/Q(^ p )) such that a = a' and t' = r in 
Gal(Q0»/Q(C P )), and a' = t' = 1 in Gal(Q(C 2 *,Cp),Q(Cp))- This is 
because 

Gal(Q(Cn)/Q(C P )) - Gal(Q«pm)/Q(C P )) ©Gal(Q(C 2 *,Cp)/Q(Cp))- 

Since Q(C P ,P2) C Q(Cp,C 2 »=) and Q(C P ,P P ) C Q(C P ™), it follows that 
cr'P 2 = t'P 2 = P 2 and a'P p + t'P p = 2P P and so a'P + t'P = 2P. 
By almost rationality, P = a'P = t'P, and so P p = a'P p = r'P p , and P p 
is almost rational over Q(C P )- An identical argument works for P 2 . □ 

We shall now limit possible P p as in Case I. Exactly as in Case I, as 
G = Gal(Q(C P 0/Q) modules, M[p m ] ~ fi p r © Z/p s Z for some r, s < m 
(this result only required the fact that Q(M[p m ]) C Q(C P ™)). 
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Choose a,r g Gal(Q(C P ™)/Q(C P )) such that 



X(<r) = 1 + p mod p fc , 



x(t) = 1 — p mod p k . 



We see that aP p + tP p — 2P P = 0. Since P p is almost rational over Q(C F ), 
this implies that aP v = P p , and thus either P p is Q-rational or r = 1 and 
M[p m ] ~ /ip Z/p s Z. If P p is Q-rational then P 2 = P - P p is almost 
rational over Q and so P2 is also Q-rational, from Case I. Hence (possibly 
after subtracting a rational point of 3-power order, allowed by Lemma 
1.1(3)) we may assume that P p generates a fi p subgroup of E[p\. 

The argument for n = 2 k applies equally well over the field Q(Cp) 
instead of Q, and we may similarly conclude that P2 is defined over Q(C P ). 
If p = 3, then we are in the P = Q + R+S case of Theorem 1.2. Note that 
such a point is almost rational, since the only non-trivial Galois conjugate 
of P is aP = -Q + R + aS, and so 2aP - 2P = -Q / 0. The only thing 
left to check is that S has order less than 32. If S had order divisible by 
32, then E and the Gal(Q/Q( v / —3)) module generated by S would give 
rise to a a Q( v / — 3)-rational point of Xo(32). Since Xo(32) is explicitly 
given by the elliptic curve y 2 = x 3 — x, we may calculate its Q(V — 3)- 
rational points (equivalently, the Q rational points of Xo (32) and its twist 
y 2 — x 3 — 9x by Q(\/ — 3)). One finds that both curves have rank zero, 
and that the torsion points do not correspond to semistable elliptic curves 
over Q. The existence of the 3-rational point over Q(V — 3) suggests that 
this analysis could be refined to further limit the order of S. 

It remains to eliminate the possibility that p = 5. If E is a semistable 
elliptic curve with ^5 <—* E[5], then there exists a 5-isogenous curve E' 
with a rational point of order 5. Moreover, E[2] ~ E'[2], and so E' also 
has a rational point of order 2. Hence E' has a rational point of order 10. 
Such curves are parameterized by the genus zero curve X\(1Q). 

We first consider the case when E[2] C M[2]. Since E[2] is reducible, 
it is defined over some field of degree d < 2. Since Q(M) C Q(Cs), Q(E[2]) 
must either be Q or Q(\/5). Since E[2] ~ -E'[2], the same must be true of 
E' [2] . Kubert |5] gives an explicit parameterization of the genus zero curve 
.Xi(lQ) in terms of some uniformizing parameter /. The discriminant of 
the cubic in the Weierstrass equation for E' is a (rational) square times 
(2/ - 1)(4/ 2 - 2/ - 1). Hence if Q(£'[2]) C Q( v / 5) then one of the 
equations 



must have a rational solution. The first curve is E\ — 20A2 in Cremona's 
tables (H|), the second its twist E 2 = 10041. We find that Pi(Q) ~ Z/6Z 
and E2(Q) — Z/2Z, where each torsion point corresponds to a curve such 
that A B ; = 0, and so does not correspond to an actual elliptic curve. 
Hence E[2] £ M[2\. 

Suppose now that E[2] does not contain M[2]. If P is of order 10, then 
5P £ M[2] is defined over either Q or Q{y/E). If 5P is not defined over 



y = (2/ 



1)(4/ 2 



2/-1), 5j/ 2 = (2/-l)(4/ 2 -2/-l) 
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Q, then since E[2] is reducible, it must contain some non-trivial rational 
point and then all of E[2] will be defined over Q(v5). This situation 
was considered above. If 5P G -E(Q), then aP + a 2 P = 2P, where 
Xs(o") = 3 mod 5 and X5(°" 2 ) = 4 mod 5. This contradicts the almost 
rationality of P. Hence P is of order divisible by 20. 

Let Q = mP be of order 4. Then since the Galois module generated 
by Q does not contain E[2], it must be cyclic. By assumption E[5] also 
contains a cyclic Galois submodule of order 5. Together they generate a 
Galois invariant cyclic subgroup of order 20, which is impossible, since 
Xq(20) has no non-cuspidal rational points. We conclude that M cannot 
contain a /15 subgroup. 

3.3 Case III: Remaining S 

For all other possible n, we may rule out the existence of P by the following 
simple arguments. Denote by S the set of primes dividing n. 

• S = {7, 5, 3, 2}, {7, 5, 3}, {7, 5, 2}, {7, 5}. From Theorem 2.2, E[7] 
is reducible. Since (7 2 -1,5) = 1, by Corollary 2.1, that M[5] is 
unramified outside 5. If E[5] was irreducible, then it would be finite 
at 5 and unramified outside 5. Arguing as in the proof of Theorem 
2.2, we infer that E[5] must be reducible. Since E is semistable, 
there exists an isogenous curve E' with a rational point of order 35. 
This contradicts Theorem 2.3. 

• S = {7,3, 2}, {7, 3}. From Theorem 2.2, E[7] is reducible. If E[3] 
is reducible then there exists an isogenous curve E' with a rational 
point of order 21, which contradicts Theorem 2.3. Thus E[3] is ir- 
reducible and so finite at 3 by Theorem 2.2. One sees that N(ps) is 
either 1,2,7 or 14. By level lowering |10| . the only allowable possi- 
bility is that JV(p3) = 14. In this case, p3 must arise as the Galois 
representation attached to some modular form in S l 2(ro(14)) (and 
trivial character). This space is one dimensional, and corresponds to 
the elliptic curve A"o(14) of conductor 14. Yet from Cremona's ta- 
bles ( 2 ) all curves of conductor 14 are reducible at 3, which implies 
that p3 must also be reducible. This is a contradiction. 

• S = {5,3, 2}, {5, 3}. From Theorem 2.2, E[5] is reducible. If E[3] 
is reducible then there exists an isogenous curve E' with a rational 
point of order 15, which contradicts Theorem 2.3. Thus E[3] is 
irreducible and so finite at 3 by Theorem 2.1. One sees that N(ps) 
is either 1, 2, 5 or 10. All cases are impossible, by Ribet's theorem 

• S = {7, 2}. From Theorem 2.2, E[7] is reducible. If E[2] is reducible 
then there exists an isogenous curve E' with a rational point of order 
14, which contradicts Theorem 2.3. Thus E[2] is irreducible and so 
finite at 2 by Theorem 2.1. One sees that N(p2) is either 1 or 7. The 
first possibility is excluded by Tate |18|. In the second case, since f>2 
is genuinely ramified at 7, we may use Ribet |11| to conclude that p~2 
arises from some modular form in S l 2(ro(14)). Again from Cremona's 
tables ( 2 ), all elliptic curves of conductor 14 are reducible at 2, and 
thus f>2 is also, a contradiction. 
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